base/protocols/modbus/main.zeek

Modbus

Base Modbus analysis script.

Namespace

Modbus

Imports

base/protocols/modbus/consts.zeek

Summary

Types

Modbus::Info: record

Redefinitions

Log::ID: enum	Modbus::LOG
connection: record	New Fields connection modbus: Modbus::Info &optional
likely_server_ports: set &redef

Events

Modbus::log_modbus: event

Event that can be handled to access the Modbus record as it is sent on to the logging framework.

Hooks

Modbus::log_policy: Log::PolicyHook

Detailed Interface

Types

Modbus::Info

Type

record

ts: time &log

Time of the request.

uid: string &log

Unique identifier for the connection.

id: conn_id &log

Identifier for the connection.

tid: count &log &optional

Modbus transaction ID

unit: count &log &optional

The terminal unit identifier for the message

func: string &log &optional

The name of the function message that was sent.

pdu_type: string &log &optional

Whether this PDU was a response (“RESP”) or request (“REQ”)

exception: string &log &optional

The exception if the response was a failure.

track_address: count &default = 0 &optional

(present if policy/protocols/modbus/track-memmap.zeek is loaded)

Events

Modbus::log_modbus

Type

event (rec: Modbus::Info)

Event that can be handled to access the Modbus record as it is sent on to the logging framework.

Hooks

Modbus::log_policy

Type

Log::PolicyHook